Installation guide

Setting the REMOTE_USER Server Variable
124 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
Setting the REMOTE_USER Server Variable
The REMOTE_USER server environment variable can be set to a Sun ONE Identity
Server authenticated user or an anonymous user. By setting this variable to a
specific user, the user becomes available to web applications (such as a CGI,
servlet, or ASP program). This feature makes it possible to personalize the content
of displayed HTML pages to specific users.
To enable the REMOTE_USER setting for globally not-enforced URLs as specified in
the AMAgent.properties file (these are URLs that can be accessed by
non-authenticated users), you must set the following property in the
AMAgent.properties file to TRUE (by default, the value of this property is set to
FALSE):
com.sun.am.policy.agents.anonRemoteUserEnabled=TRUE
When you set this property value to TRUE, the value of REMOTE_USER will be set to
the value contained in the following property in the AMAgent.properties file (by
default, this value is set to anonymous):
com.sun.am.policy.agents.unauthenticatedUser=anonymous
Validating Client IP Addresses
This feature can be used to enhance security by preventing the stealing or hijacking
of SSO tokens.
Certificate Name Trust Attrubutes
cert-name C,C,C
p Valid peer
P Trusted peer (implies c)
c Valid CA
T Trusted CA to issue client certs (implies c)
C Trusted CA to certs(only server certs for ssl) (implies c)
u User cert
w Send warning